Traffic Trace Info
DumpFile: 201004150900.dump
FileSize: 1698.32MB
Id: 201004150900
StartTime: Thu Apr 15 09:00:00 2010
EndTime: Thu Apr 15 09:15:01 2010
TotalTime: 900.53 seconds
TotalCapSize: 1329.59MB CapLen: 96 bytes
# of packets: 24164411 (14107.99MB)
AvgRate: 131.43Mbps stddev:13.95M
IP flow (unique src/dst pair) Information
# of flows: 964939 (avg. 25.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.3% 2.1% 1.8% 1.6% 1.1% 1.1% 1.0% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 556174
Top 10 bandwidth usage (bytes/total in %):
23.6% 11.7% 4.1% 3.9% 3.9% 3.4% 3.1% 3.0% 2.5% 2.3%
# of IPv6 addresses: 1044
Top 10 bandwidth usage (bytes/total in %):
23.7% 19.2% 9.1% 8.6% 5.6% 4.8% 4.4% 4.3% 4.1% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004150900.pktlen.png)
detailed numbers
[ 32- 63]: 3846551
[ 64- 127]: 6731031
[ 128- 255]: 2539534
[ 256- 511]: 1498002
[ 512- 1023]: 725212
[ 1024- 2047]: 8824081
Protocol Breakdown
![[protocol breakdown chart]](201004150900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24164411 (100.00%) 14793296215 (100.00%) 612.19
ip 24104504 ( 99.75%) 14782699644 ( 99.93%) 613.28
tcp 13073992 ( 54.10%) 8944521516 ( 60.46%) 684.15
http(s) 5174423 ( 21.41%) 6978189195 ( 47.17%) 1348.59
http(c) 4108556 ( 17.00%) 509084248 ( 3.44%) 123.91
squid 216523 ( 0.90%) 77831043 ( 0.53%) 359.46
smtp 313072 ( 1.30%) 89830589 ( 0.61%) 286.93
ftp 11950 ( 0.05%) 1286174 ( 0.01%) 107.63
pop3 22594 ( 0.09%) 5797102 ( 0.04%) 256.58
imap 1798 ( 0.01%) 627126 ( 0.00%) 348.79
telnet 571 ( 0.00%) 71505 ( 0.00%) 125.23
ssh 648659 ( 2.68%) 95396578 ( 0.64%) 147.07
dns 54080 ( 0.22%) 3708644 ( 0.03%) 68.58
bgp 185 ( 0.00%) 89240 ( 0.00%) 482.38
realaud 10 ( 0.00%) 1529 ( 0.00%) 152.90
rtsp 296 ( 0.00%) 77534 ( 0.00%) 261.94
icecast 13102 ( 0.05%) 842246 ( 0.01%) 64.28
hotline 5 ( 0.00%) 727 ( 0.00%) 145.40
other 2508167 ( 10.38%) 1181687976 ( 7.99%) 471.14
udp 7365672 ( 30.48%) 3997555187 ( 27.02%) 542.73
dns 766205 ( 3.17%) 175124199 ( 1.18%) 228.56
realaud 56 ( 0.00%) 4745 ( 0.00%) 84.73
halflif 161 ( 0.00%) 25832 ( 0.00%) 160.45
starcra 279 ( 0.00%) 30856 ( 0.00%) 110.59
everque 634 ( 0.00%) 118127 ( 0.00%) 186.32
unreal 193 ( 0.00%) 34113 ( 0.00%) 176.75
quake 39 ( 0.00%) 3375 ( 0.00%) 86.54
cuseeme 3 ( 0.00%) 365 ( 0.00%) 121.67
other 6596366 ( 27.30%) 3821537172 ( 25.83%) 579.34
icmp 556109 ( 2.30%) 81905657 ( 0.55%) 147.28
ipip 325 ( 0.00%) 38644 ( 0.00%) 118.90
ipsec 2484 ( 0.01%) 872124 ( 0.01%) 351.10
ip6 3087907 ( 12.78%) 1748947741 ( 11.82%) 566.39
other 18015 ( 0.07%) 8858775 ( 0.06%) 491.74
frag 27457 ( 0.11%) 29727877 ( 0.20%) 1082.71
ip6 59907 ( 0.25%) 10596571 ( 0.07%) 176.88
tcp6 19685 ( 0.08%) 2185287 ( 0.01%) 111.01
http(s) 233 ( 0.00%) 229013 ( 0.00%) 982.89
http(c) 3724 ( 0.02%) 337072 ( 0.00%) 90.51
squid 4 ( 0.00%) 296 ( 0.00%) 74.00
smtp 253 ( 0.00%) 112895 ( 0.00%) 446.23
ftp 5348 ( 0.02%) 530914 ( 0.00%) 99.27
imap 451 ( 0.00%) 51921 ( 0.00%) 115.12
ssh 3225 ( 0.01%) 267418 ( 0.00%) 82.92
dns 169 ( 0.00%) 47683 ( 0.00%) 282.15
bgp 104 ( 0.00%) 14469 ( 0.00%) 139.12
icecast 2 ( 0.00%) 148 ( 0.00%) 74.00
other 6172 ( 0.03%) 593458 ( 0.00%) 96.15
udp6 32978 ( 0.14%) 7169384 ( 0.05%) 217.40
dns 32797 ( 0.14%) 7139165 ( 0.05%) 217.68
other 181 ( 0.00%) 30219 ( 0.00%) 166.96
icmp6 6810 ( 0.03%) 821385 ( 0.01%) 120.61
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 403 ( 0.00%) 416299 ( 0.00%) 1033.00
tcpdump file: 201004150900.dump.gz (596.82 MB)